2023 | 2024 | ||||||
Price: | 2.20 | EPS | -.53 | .32 | |||
Shares Out. (in M): | 37 | P/E | 0 | 7 | |||
Market Cap (in $M): | 82 | P/FCF | 0 | 4 | |||
Net Debt (in $M): | -25 | EBIT | 0 | 9 | |||
TEV (in $M): | 57 | TEV/EBIT | 0 | 6.3 |
Sign up for free guest access to view investment idea with a 45 days delay.
Bottom Line Up Front: I am going to experiment in this write-up by using redline to take accountability for the old writeup while providing some color commentary. Then, I have appended some financials and a Q&A at the back. The less patient or those who read the first writeup are best advised to skip to the end.
TLDR; Allot's business has finally hit rock bottom, costs are being cut rapidly to achieve profitability, and Verizon, the world's largest carrier by global revenue, is ramping up its security as a service (SECaaS) offering powered by Allot and having success, thus validating a potential $1 billion + opportunity for the tiny Israeli networking company.
Description:
ALLT is a small cap network visibility and cybersecurity software company headquartered in Israel. ALLT was previously written up by Cobiaman in late 2015 and again by tcc in 2020. TCC's Jan 2020 writeup provided a great overview of Allot's SaaS cybersecurity offering, AllotSecure and the growth math attached to that segment. We will focus our writeup on how ALLT's share price has dislocated dramatically from fundamentals in recent months, creating an extremely asymmetric setup for investors, whereby a nascent but proven SaaS cybersecurity business with a potential future value in the billions can be purchased for a negative implied value today. STILL TRUE, JUST NOT WHEN WRITTEN!
A Quick Overview of Allot's Business and Valuation:
Why is the Stock at $2.209?
Obviously, we are arguing there has been a very sharp dislocation in Allot's share price vs. its intrinsic value that begs explanation. Following its well-received analyst day and the award of the DISH Networks 5G DDOS deal, Allot shares traded as high as $21 in June of 2021, but then fell by over 50100% (IT FEELS LIKE) to $2.208.90 as of Friday. Having first invested in the company near $5 in late 2015 (DON’T REMIND ME), we have some decent historical perspective and can provide a relevant timeline:
Why Now is the Time to Own the Stock
In addition to Allot's extremely compelling valuation, we believe management appropriately reset expectations on the Q23 2023 earnings call which has created a favorable setup for outperformance on the critical SaaS revenue MOST metrics in 20242. Here are some of the reasons we expect Allot to outperform and trade to fair value A REAL PRICE in 20242:
Projections (OLD):
|
2020 |
2021 |
2022 |
2023 |
2024 |
DPI and 5G Revenue ($k) |
134,181.00 |
141,900.00 |
147,900.00 |
156,900.00 |
171,900.00 |
AllotSecure Revenue ($k) |
1,750 |
4,400 |
17,500 |
63,000 |
137,200 |
SaaS ARR ($k) |
2,700 |
6,000 |
28,000 |
92,000 |
196,000 |
Cumulative MAR ($mm) |
277.00 |
547.00 |
1,047.00 |
1,347.00 |
1,647.00 |
SaaS ARR % Cum MAR |
0.97% |
1.10% |
2.67% |
6.83% |
11.90% |
Operating Income ($k) |
-3249 |
-3,366.43 |
-16,434.56 |
13,991 |
73,512 |
Management assumes that penetration rates of ~25% of MAR are achievable in the long-term; our model assumes Allot reaches 12% deployment of cumulative MAR bookings by 2024E on an ARR basis. 2022 will be a tough year for operating leverage as management plans to invest to drive adoption at existing carriers, develop new products and cement large deal signings while DPI / 5G revenues are likely quite stagnant until true 5G deployments accelerate in late 2022 / 2023. We are above guidance for 2022 revenues, hence investors should expect initial 2022 guide to look more like street (operating losses roughly 7m worse than ours).
Obviously, there is massive upside potential if the AllotSecure ramp ultimately manifests. Our checks have found no reasons yet why it should not. STILL TRUE.
The main risks are competitive as this is a rapidly changing industry, however operators are likely to be very sticky once the business is awarded, thus VERIZON’S DCF ALONE Allot's existing ~$500m of MAR bookings and 18 signed deals have intrinsic value that could COULD exceed the current market cap. We believe Allot has the best offering for carriers, with Infoblox (BLOX, license software company acquired by Thoma Bravo at 3.5x sales in 2016) and Akamai (AKAM, CDN and DNS security company) offering lower-end DNS solutions THAT ALLOT ALSO OFFERS AND HAS WON BUSINESS WITH IN LOWER ARPU MARKETS THAT REQUIRE A <$1.00 / USER / MONTH PRICE POINT.
Another risk is that the DPI / 5G business rolls over AT LEAST WE SAID IT!. Allot has overachieved in this business and Sandvine / Procera is likely to be competing more aggressively during its BUSTED BECAUSE THEY WANTED DOUBLE DIGIT EBITDA MULTIPLE ON SHRINKING REVENUE sales process / IPO process, so it is possible revenue here could stagnate or even decline modestly in any given year. However, we are confident in Allot's market leading position and particularly in 5G DDOS where Sandvine does not play, so at some point that business has growth prospects and will continue to provide downside support to the share price. STILL TRUE.
We see a path to a $240+ stock in 2 years time and further compounding potential thereafter. Strategic interest in the asset (likely in the mid-teens MID SINGLE DIGITS as a starting point) is a further margin of safety.
New Content:
We thought it would be helpful to host a fireside chat with Thor25 before he retires to herd alpacas and hunt for Peruvian artifacts and tapestries in the Andes, which would clearly be a better use of time for him than stock picking:
Thor, when you have been so wrong, why are you confident Allot Smart / DPI won’t keep declining and isn’t a secularly shrinking business?
A: Of course, our confidence is lower having been so repeatedly wrong. But DPI has been through cycles before, notably around the original 4G LTE core network build out in the 2012 – 2014 timeframe and then with some very large policy enforcement deals and 5G DDoS deals in 2019 – 2021. Allot continues to win large deals, poaching Rogers from Sandvine over the last year, though we believe this deal did include a large one-time discount on the initial lumpy order which is causing Q3 gross margin to be only 50%. The existing DPI installed base is still a source of cash flow and periodic upgrades. In some areas, like enterprise (~$20m of revenue annually), there is likely a secular decline driven by migration to the cloud from on prem. But for large carriers and government agencies that constitute the vast majority of the business, there should be periodic large deals activity. Developing markets in APAC and Africa also continue to invest both in DPI and in digital enforcement, and digital enforcement is also winning deals in developed markets. Dedicated DPI companies are amazingly good at doing this stuff at massive scale and low latency, which is why the business has had shelf life.
5G DDoS remains a big opportunity when 5G native cores get more fully deployed. This could happen in the next few years and drive a large upcycle in the SMART business. Carrier DDoS is a $500 million market annually and at 5G, we believe Allot has the best solution as evidenced by the DISH and Rakuten wins.
Model:
2014 | 2015 | 2016 | 2017 | 2018 | 2019 | 2020 | 2021 | 2022 | 2023E | 10Y Average | 2024E | 2025E | |
Allot Smart | |||||||||||||
Product | 80872 | 62462 | 54432 | 48727 | 55627 | 67440 | 92700 | 98100 | 61500 | 41700 | 66356 | 46,500 | 60,450 |
Service / Maintenance | 36748 | 37325 | 35937 | 33265 | 39668 | 42660 | 41531 | 42900 | 54100 | 49300 | 41343.4 | 46,400 | 51,040 |
Total Revenue | 117620 | 99787 | 90369 | 81992 | 95295 | 110100 | 134231 | 141000 | 115600 | 91000 | 107699.4 | 92900 | 111490 |
SECaaS | 1700 | 4200 | 7100 | 11370 | NA | 30,055 | 53,899 | ||||||
Verizon SECaaS | 563 | 12,168 | 23,868 | ||||||||||
Ex Verizon SECaaS | 10807 | 17887 | 30031 | ||||||||||
Total Revenue | 117500 | 99787 | 90369 | 81992 | 95295 | 110100 | 135931 | 145200 | 122700 | 102370 | 110124.4 | 122955.008 | 165389.008 |
Gross Profit | 81394 | 75373 | 64283 | 55772 | 67733 | 78171 | 96812 | 102310 | 84595 | 66180 | 77262.3 | 86068.5056 | 118734.9856 |
GM % | 69% | 76% | 71% | 68% | 71% | 71% | 71% | 70% | 69% | 65% | 70% | 70% | 72% |
Opex | 77550 | 74610 | 62960 | 64650 | 72954 | 85201 | 100000 | 107156 | 107143 | 86319 | 83854.3 | 77507 | 83707 |
Operating Profit | 3844 | 763 | 1323 | -8878 | -5221 | -7030 | -3188 | -4846 | -22548 | -20139 | -6592 | 8561.5056 | 35027.9856 |
Shares Out | 37743 | 38875.29 | 39652.7958 | ||||||||||
Unlevered EPS | ($0.53) | $0.22 | $0.88 | ||||||||||
Cash | 64463 | 83024.5056 | 128052.4912 | ||||||||||
Debt (Convert) | 40000 | 40000 | 40000 | ||||||||||
net cash / share | $0.65 | $1.11 | $2.22 |
The model above shows SMART / DPI product revenue has averaged around $66 million over the past ten years, while service and maintenance revenues have grown from the mid $30 millions to $50 million. $42 million in 2023 is a definite outlier to the downside. Our projections over two years call for a recovery to $60 million and $50 million, respectively, putting consolidated SMART revenues essentially in-line with the 10-year average (but up 20%+ from the anemic 2023 result). It’s out of line with the recent trend but feels reasonable, particularly when taking into account the potential for growth in DDoS to offset product revenue weakness in DPI.
Thor, how could management have bungled both expectations and operations so badly? Does the Board have any idea what it is doing?
Allot went all-in on SECaaS based on essentially one case study in Vodafone. Their founder is an entrepreneur and is still chairman of the Board. There was probably some hubris behind the decision to staff up so aggressively, and to land grab with little regard to disciplined modeling assumptions. They should have added directors with experience in cybersecurity and SaaS much sooner, but resisted doing so. We have heard that on two occasions Allot shot down takeover offers to remain independent including one in the $20s; the legacy Board probably has felt lots of pressure to validate that decision which can incentivize home run swinging.
With that said, since our write-up the Board has added three directors, including two appointed by shareholders (one of them being the CIO of the largest shareholder), and two that have relevant operational and cybersecurity backgrounds. We believe these directors have helped, most recently in pushing for cost discipline that manifested in a $15 million cost reduction plan announced alongside Q2 earnings. Management and the Board have also greatly refined the strategy for SECaaS and have landed on some logical solves, including charging monthly minimums for most new SECaaS customers and focusing resources on large customers with meaningful TAMs rather than smaller ones, in addition to building models on a bottoms up basis and setting the cost structure to a downside rather than base or bull scenario.
There was also clearly some bad program management and balance sheet risk management going on at Allot, as evidenced by the $14 million write-down of AR with African resellers (which management still believes they will collect, just not timely) and the 50% gross margin in Q3 – although to be fair, that was a unique situation involving a large competitive displacement.
Where does your comfort on SECaaS growth in 2024 and 2025 come from?
Verizon FWA | Q323E | Q423E | Q124E | Q224E | Q324E | Q424E | Q125E | Q225E | Q325E | Q425E |
SMB sub additions | 100000 | 150000 | 200000 | 250000 | 250000 | 250000 | 250000 | 250000 | 250000 | 250000 |
total subs | 1000000 | 1150000 | 1350000 | 1600000 | 1850000 | 2100000 | 2350000 | 2600000 | 2850000 | 3100000 |
% attach of quarterly net adds | 30% | 50% | 30% | 30% | 30% | 50% | 50% | 50% | 50% | 70% |
VerizonSecure SMB FWA adds | 30000 | 75000 | 60000 | 75000 | 75000 | 125000 | 125000 | 125000 | 125000 | 175000 |
VZ Secure total subs | 30000 | 105000 | 165000 | 240000 | 315000 | 440000 | 565000 | 690000 | 815000 | 990000 |
Penetration of FWA base | 3% | 9% | 12% | 15% | 17% | 21% | 24% | 27% | 29% | 32% |
Pricing | $13 | $13 | $13 | $13 | $13 | $13 | $13 | $13 | $13 | $13 |
Split to Allot | 20% | 20% | 20% | 20% | 20% | 20% | 20% | 20% | 20% | 20% |
Revenue | $117,000 | $409,500 | $1,287,000 | $1,872,000 | $2,457,000 | $3,432,000 | $4,407,000 | $5,382,000 | $6,357,000 | $7,722,000 |
ARR | $936,000 | $3,276,000 | $5,148,000 | $7,488,000 | $9,828,000 | $13,728,000 | $17,628,000 | $21,528,000 | $25,428,000 | $30,888,000 |
Above is a simplified model of Allot’s Verizon revenues. This model assumes Allot takes a 20% revenue share (low end of 20 – 50% range) and that Verizon’s blended ARPU for the Fixed Wireless Access service is $13, at the low-end of the $10 base and $20 price points per user per month. At Telefonica in Spain, Allot has shown cohort graphs that show a 50% penetration rate of SECaaS within the installed base after a couple of years. We assume the Verizon FWA product achieves between a 30 – 70% penetration rate of new FWA subscribers, growing over time and with Q4 peaks given sales pushes into year-end. By Q4 2025E we have penetration at 32%, which feels reasonable. Verizon supports about half of the SECaaS growth we assume in 2024 and 2025.
Notably, we are not assuming expansion of the Verizon sales effort into other markets (100 million consumer mobile subscribers, or the broader base of 29 million Verizon business subscribers, for example). These numbers are supportable, we believe, with Verizon FWA alone, and Verizon FWA is a single digit percentage of the total Verizon addressable market for Allot. Expansion to the rest of the network would be a massive incremental driver, but isn't necessary for very material upside to the equity.
Allot has also had a very successful launch at Taiwanese carrier FarEastTone (8.5m subscribers, ~$1.50 ARPU for the SECaaS product) in late 2022. While we are not showing our entire carrier by carrier model, FET also accounts for a fair amount of assumed growth in 2024 and 2025. In fact, almost all of the SECaaS growth in 2024 comes from FET and Verizon. By 2025, we assume some of the other large deals Allot has won including multiple unnamed Tier-1s (we believe cable operator SFR and Italian mobile carrier Wind are among these), Vodafone for Home Secure as a revenue share, and Singtel for SMB security, will be deployed and contributing to revenues as well, but we do not assume the levels of success seen by Verizon and FET to date.
Why are you so confident Verizon and FET are, in fact, going well?
FET has publicly talked up the Allot driven offering (which they call anti-terror guard, you can google and find articles in Chinese) and disclosed 2.5% penetration of the base within a few months, and received an award from Allot for their success https://www.allot.com/corporate/media-center/press-releases/allot-presents-an-award-to-taiwans-far-eastone-telecommunications-for-cybersecurity-leadership/
Verizon – Launched June 27th PR'd by Verizon first then Allot on the earnings call https://www.verizon.com/about/news/verizon-business-new-management-portal-security-solutions. Management has said Verizon is performing well and that they are looking at expanding the scope of the go to deal into other market segments besides new FWA subscribers. If you speak to management, they will confirm that subscribers are trending better than Verizon’s expectations (which obviously bodes well for SECaaS revenues in future quarters, though we don’t know what VZ’s expectations were).
What supports your lower Opex assumptions?
Allot announced a $15 million cost reduction program on Q2 earnings, that will flow through primarily in Q4 23 and Q1 24. Applying this to the run rate of Q2 NG opex yields a mid to upper $70 million run rate PF for the restructuring.
Why wouldn’t the Board just put the Company up for sale and end the misery?
With the SMART / DPI business at a likely trough, ahead of harvesting the fruits of the SECaaS investments via results at Verizon, FET and others, and before the operational restructuring yields profitability and cash flow, it would likely not make any sense to sell the Company for a single digit price. With that said, along with its preannouncement of Q2 results in July, Allot also announced that an “executive committee” of the Board had been formed, which we believe to consist of the three new directors. We believe this committee has been exploring ways to enhance shareholder value, including by cutting costs, but also likely through the exploration of a partial / full company sale. There are several potential acquirers that may have looked or continue to look, including Sandvine, Radware, Checkpoint and F5, and the business would be a good fit for tech focused PE too. Two activist shareholders owning, combined, more than 30% of Allot’s shares outstanding could make a near-term sale less likely and a long-term sale more likely when the business has inflected and shares are fairly valued.
What are some potential catalysts from here?
If Allot reiterates its guidance for 2023 and confirms it expects to be breakeven / profitable in 2024 on the Q3 call in November, shares will have likely put in a bottom. Between now and then, any announcements of new large DPI or SECaaS deals won will be helpful, but not game changing. The exception would be news of an expansion to address more customers at Verizon; that would be a gamechanger.
A strategic could also go hostile after being, possibly, rebuffed numerous times. However, with a very difficult path to success given the shareholder base and Board and headline aversion by strategics it is not likely.
What are the blind spots in this writeup?
We don’t know the exact percentage revenue share that Allot gets at Verizon, FET, or any other carrier. Historically, management has given this as a 20% - 50% range, and they have stood by this in calls with investors in recent months, while guiding that deals with minimum guarantees or large carriers could be at the low end. It’s possible that, for example, Verizon agreed to pay $1 / month per sub to Allot and ALLT agreed because they thought the VZ price point would be $5 / month instead of $10 or $20. That reduce our VZ FWA revenue assumptions by 60%. This is just speculation though to be clear, and for now we think it’s more likely that the deal is still percentage of revenue based and in the range we put forth.
The second most exciting deal we had tracked and confirmed as a win was Rogers, and Rogers decided not to launch, causing ALLT to reset its SECaaS numbers for this year. That was a blow we didn’t see coming, particularly so because we believed the launch was imminent. Allot has said this is due to Rogers’ widely publicized hack-driven service outage last year, which makes sense – after all, charging for a cybersecurity product when Rogers itself was hacked probably struck executives in marketing and PR as awkward, at least for now. We have no reason to think that Rogers backed off the launch for any reason to do with the service, but if that were the case, it would be a big negative as to future T1 wins or deployment prospects at Rogers.
DPI could actually be a buggy whip and worth only run-off cash flows (which might still be worth more than the market cap). Our checks, including with large strategics in the space, don’t suggest it is. We also don’t think anybody smart would be willing to take out Allot if DPI were seriously impaired, and we believe there are multiple suitors interested in doing so.
Vodafone might not launch HomeSecure ever with Allot. Our checks confirmed the win in early 2022 ahead of Allot’s announcing of it in August, and these individuals continue to think it will launch and be meaningful, but it might never make it out of the lab. It’s not in our 2024 numbers and only minimally in our 2025, but if Vodafone didn’t launch similarly to with Rogers, the question would be why not and will this product scale with T1s outside of Verizon and FET?
The 20-F probably has a disclosure about geopolitical instability and risks in the Middle East. Those have been front and center on the political front this year. Allot needs motivated engineers and salespeople to run the business, and if they all want to move out of Israel or spend all their time protesting it would be a negative.
There could be another miss to Q4, in fact, we think Q4 gross margin likely could miss as more of the Rogers order ships in Q4. Maybe pencil 60% – 65% vs. the 70% historical average that Allot has talked about for 2024. But, there could also be a beat to top line – mean reversion both taketh and giveth.
Good luck to any and all that listen to me – you are going to need it!
Q3 earnings report confirms pickup from FET and Verizon and SECaaS accelerates. DPI stops imploding, let alone rebounds. Verizon expands the deal and opens up a $1 billion type opportunity.
show sort by |
Are you sure you want to close this position ALLOT LTD?
By closing position, I’m notifying VIC Members that at today’s market price, I no longer am recommending this position.
Are you sure you want to Flag this idea ALLOT LTD for removal?
Flagging an idea indicates that the idea does not meet the standards of the club and you believe it should be removed from the site. Once a threshold has been reached the idea will be removed.
You currently do not have message posting privilages, there are 1 way you can get the privilage.
Apply for or reactivate your full membership
You can apply for full membership by submitting an investment idea of your own. Or if you are in reactivation status, you need to reactivate your full membership.
What is wrong with message, "".